MAL-2025-71791 Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70695 Malicious code in smiling-indigo-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd7920d5200b98c612dac692c4eb88d519884bc64fb436366fa029af0e34be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71561 Malicious code in whispering-aqua-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19aaf887e211e6bab96c21bfb9dd9bd5e7e54fbb1b443d3cbf5583ee2da9307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68582 Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69265 Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70864 Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69710 Malicious code in old-peach-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96238dc96f227e1e070f9a42d86ff2abba25b4e9ca0b80e7eb4639f7f8d52bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66838 Malicious code in arrogant-blush-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6820ff06f89187a7e4e95990a18499f94883e3124de48349e861bce3323db21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71276 Malicious code in unfair-orange-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946c9f03cf05416d7b26062ff3cf16766e095fcebf7ac9d4a2649e74ea52441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52067

Malicious code in sharp-sapphire-hyena npm...

EUVD-2025-52672

Malicious code in pregnant-indigo-swallow npm...

EUVD-2025-53566

Malicious code in left-brown-mink npm...

Malicious code in strong-yellow-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f82edad58dc5ec590499f6e6f99a2c635b05861a0b154ea4beaf5f923fdb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52590

Malicious code in prominent-white-mastodon npm...

Malicious code in correct-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d90f2aeb82d1031d6afdcc0b35f93e1fb5add24a91dd8b233fe07a15e6163f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-gold-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b50636bcd67ad6bc546a303dc183480157ce424d18f92ed70ee67b56fb3c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jayo555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b4d31f2440a85660a47ae8569b7f3f2c6e74c717c84b12b1996be7223b2137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...